137 matches found
ROOT-APP-NPM-CVE-2026-89418 CVE-2026-89418 in google-protobuf - Patched by Root
Root has patched CVE-2026-89418 in the google-protobuf package for Root:npm. Multiple fixed versions available...
UBUNTU-CVE-2026-54451
Elixir protobuf is a pure Elixir implementation of Google Protobuf. From 0.8.0 until 0.16.1, services that decode attacker-controlled protobuf bytes with Protobuf.Decoder can be taken offline when the schema contains a self-referential or cyclic message type. In lib/protobuf/decoder.ex,...
CVE-2026-89418
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
AZL-103491 CVE-2026-89418 affecting package python-tensorboard 2.16.2-6
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418
A flaw was found in google-protobuf. An unauthenticated remote attacker can send a specially crafted message containing deeply nested protobuf group fields to a Node.js service using the affected library. This uncontrolled recursion can cause the service to crash, leading to a Denial of Service D...
EUVD-2026-81523
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418
google-protobuf (protobuf-javascript) is vulnerable to unbounded recursion when parsing unknown protobuf group fields. An unauthenticated attacker can send a small crafted payload of deeply nested START_GROUP wire bytes to any Node.js service calling the generated deserializeBinary() API, trigger...
CVE-2026-89418 Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CVE-2026-89418 Uncontrolled Recursion leading to Denial of Service in protobuf-javascript (google-protobuf)
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
PT-2026-94302
Name of the Vulnerable Software and Affected Versions google-protobuf affected versions not specified Description The software contains an unbounded recursion issue when parsing unknown protobuf group fields. An attacker can send a crafted payload consisting of deeply nested START GROUP wire byte...
CVE-2026-89418: Uncontrolled Recursion
google-protobuf contains an unbounded recursion when parsing unknown protobuf group fields. An attacker can send a small crafted payload of deeply nested STARTGROUP wire bytes to any Node.js service that calls the generated deserializeBinary API, causing a RangeError: Maximum call stack size...
CLSA-2026-1787916992 TuxCare security update for google/protobuf (1 CVE)
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.25.9-p1+tuxcare...
CLSA-2026-1779410884 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 8 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.9-tuxcare.2...
CLSA-2026-1778633123 TuxCare security update for google/protobuf (1 CVE)
TuxCare rebuilt google/protobuf to address 1 CVE. Fixed in 3.24.4-p1+tuxcare...
CLSA-2026-1777250321 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.2...
CLSA-2026-1774398095 TuxCare security update for com.google.protobuf (1 CVE)
TuxCare rebuilt 7 com.google.protobuf packages to address 1 CVE. Fixed in 3.21.1-tuxcare.1...
CLSA-2025-1756080325 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)
TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-0994 DESCRIPTION: A denial-of-service DoS vulnerability exists in google.protobuf.jsonformat.ParseDict in Python, where the maxrecursiondepth limit can be bypassed when...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in google.protobuf [CVE-2026-0994]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in google.protobuf, due to an issue that allows maxrecursiondepth limit to be bypassed when parsing nested google.protobuf.Any messages. CVE-2026-0994. Google.protobuf is used in our speech service runtimes. This...
